security issue

[weathon]

I am curious, if I use the local server to create a page, but this page was hijacked, will produce remote code run vulnerability?

[blag]

@weathon Can you explain what you mean a bit more?

[weathon]

OK, this project is use HTML to make python's UI, and js can call python function. But if the pages have some XSS or CSRF, hacker could put some js code in that page, and they can control your PC.

[weathon]

My English is not well, so if my explain is not good, please let me know.

[blag]

Where is the code in this repo that allows you to call Python code from Javascript?

[weathon]

I just think, because the README said that this is an repo like Ele

[blag]

Can you create a proof of concept?

[MartijnBraam]

Are you sure we're talking about the same repository? This project doesn't do anything with javascript/internet/networking at all.

[blag]

I am similarly confused.